最新的Juniper JN0-333免費考試真題

問題1

What are the maximum number of redundancy groups that would be used on a chassis cluster?

A. The maximum number of redundancy groups use is equal to the number of configured logical interfaces.

B. The maximum number of redundancy groups use is equal to one more than the number of configured physical interfaces.

C. The maximum number of redundancy groups use is equal to one more than the number of configured logical interfaces.

D. The maximum number of redundancy groups use is equal to the number of configured physical interfaces.

正確答案: A

問題2

What are three defined zone types on an SRX Series device?

A. dynamic

B. functional

C. routing

D. junos-host

E. null

正確答案: B,D,E

問題3

You must verify if destination NAT is actively being used by users connecting to an internal server from the Internet.
Which action will accomplish this task on an SRX Series device?

A. Examine the active security flow sessions.

B. Examine the NAT translation table.

C. Examine the destination NAT translations table.

D. Examine the installed routes in the packet forwarding engine.

正確答案: C

問題4

You are changing the default vCPU allocation on a vSRX.
How are the additional vCPUs allocated in this scenario?

A. One dedicated vCPU is allocated for the Junos control plane and the remaining vCPUs for the packet forwarding engine.

B. One dedicated vCPU is allocated for the packet forwarding engine and the remaining vCPUs for the Junos plane.

C. One dedicated vCPU is allocated for the packet forwarding engine, one for the Junos control plane, and the remaining vCPUs are equally balanced.

D. The vCPU are allocated equally across the Junos control plane and packet forwarding engine.

正確答案: A

問題5

Which three elements does AH provide in an IPsec implementation? (Choose three.)

A. availability

B. replay attack protection

C. integrity

D. authentication

E. confidentiality

正確答案: B,C,D

問題6

You are asked to change when your SRX high availability failover occurs. One network interface is considered more important than others in the high availability configuration. You want to prioritize failover based on the state of that interface.
Which configuration would accomplish this task?

A. Configure interface monitor inside the redundancy group that contains the important physical interface; adjust the weight associated with the monitored interface to 255.

B. Create a VRRP group configuration that lists the reth's IP address as the VIP while using each physical interface that make up the reth definition of each SRX HA pair.

C. Create a separate redundancy group to isolate the important interface; set the priority of the new redundancy group to 255.

D. Configure IP monitoring of the important interface's IP address and adjust the heartbeat interval and heartbeat threshold to the shortest settings.

正確答案: A

問題7

You are asked to support source NAT for an application that requires that its original source port not be changed.
Which configuration would satisfy the requirement?

A. Configure the egress interface to source NAT fixed-port status.

B. Configure a source NAT rule that references an IP address pool with the port no-translation parameter enabled.

C. Configure a source NAT rule that references an IP address pool with interface proxy ARP enabled.

D. Configure a source NAT rule that sets the egress interface to the overload status.

正確答案: B

問題8

Which statement is true about Perfect Forward Secrecy (PFS)?

A. PFS increases the IPsec VPN encryption key length and uses RSA or DSA certificates.

B. PFS is implemented during Phase 1 of IKE negotiations and decreases the amount of time required for IKE negotiations to complete.

C. PFS is used to resolve compatibility issues with third-party IPsec peers.

D. PFS increases security by forcing the peers to perform a second DH exchange during Phase 2.

正確答案: D

最新的Juniper Security, Specialist (JNCIS-SEC) - JN0-333免費考試真題

聯系我們

站內鏈接

最新更新